By default on Debian Lenny the portmap service listens on UDP port 111. For security reasons it could by reasonable to prevent portmap from opening the port if you do not run services like NFS or NIS services that depend on a RPC port mapper like portmap. More here